Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/18141426114211EFA0FF3956C4F9AE02.roa
File:                     18141426114211EFA0FF3956C4F9AE02.roa (raw, json)
Hash identifier:          6ibxUZSfpjtHgkJWZZsze7H8qqCpHCCsEyFJM3urMps=
Subject key identifier:   3D:D7:8E:5F:E0:04:F6:42:69:53:84:B5:11:7D:7E:0D:8F:DC:70:C9
Certificate issuer:       /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Certificate serial:       0159
Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/18141426114211EFA0FF3956C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:40:20 +0000
ROA not before:           Sat 31 May 2025 06:06:35 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152850
IP address blocks:        103.154.192.0/23 maxlen: 23
                          103.154.192.0/24 maxlen: 24
                          103.154.193.0/24 maxlen: 24
                          2001:df3:cc40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1630, serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
        Validity
            Not Before: May 31 06:06:35 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59344-5344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:12:6a:7b:51:0a:bb:2e:00:1c:66:f1:31:
                    c4:18:1a:4a:da:de:46:b2:8f:7a:7e:72:da:ab:0d:
                    88:5e:99:9c:67:0f:9d:99:ab:46:52:30:7b:a8:b3:
                    c3:b6:40:19:26:5e:74:52:96:30:e3:1b:a9:95:a7:
                    97:94:c8:22:59:b1:a7:ea:8d:14:66:94:ed:95:c0:
                    b2:95:58:91:da:07:8d:c4:7a:39:c2:8b:ee:8e:ce:
                    f8:7a:80:99:67:ba:e5:4a:a3:81:38:f4:88:5b:f2:
                    cc:c6:b2:2c:a3:b7:a2:d8:cf:e7:00:cd:d3:85:42:
                    e7:8a:a0:bc:d7:cc:fd:dd:af:89:4b:d0:4a:66:82:
                    b6:84:55:9a:7b:50:aa:23:9c:63:33:7b:a1:49:d8:
                    7e:c2:83:4b:a1:d2:74:20:de:5c:54:64:b4:5a:7e:
                    46:b5:e3:57:ea:22:2a:b1:68:13:f2:b4:17:97:64:
                    63:21:b7:af:6d:95:b1:d7:10:50:38:3f:18:1b:04:
                    6a:6c:ca:b3:6b:11:ed:f6:b6:a7:0c:c6:14:51:e3:
                    a7:2a:73:7e:0e:c6:a6:e6:0f:32:75:79:51:bd:e5:
                    14:a6:46:8e:74:55:15:35:ff:3d:35:74:9c:b2:60:
                    eb:35:7c:70:2f:9c:e1:bc:17:4d:03:94:32:4d:00:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D7:8E:5F:E0:04:F6:42:69:53:84:B5:11:7D:7E:0D:8F:DC:70:C9
            X509v3 Authority Key Identifier:
                keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/18141426114211EFA0FF3956C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.192.0/23
                IPv6:
                  2001:df3:cc40::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:53:96:1a:11:44:ce:30:00:b4:d0:3c:68:7c:dd:c3:6d:d9:
         3f:6a:c1:e5:11:bc:7f:22:94:a1:2e:86:ff:9d:b2:be:22:9a:
         aa:48:8c:6f:ba:e9:58:56:d9:49:b4:5a:87:bd:52:cc:90:a9:
         f9:2d:3f:7d:d9:b9:ed:47:ae:6d:32:dd:8f:af:90:7e:19:21:
         07:27:ae:84:4e:58:c0:1f:e2:ec:10:50:4a:2c:81:03:cb:19:
         07:50:d5:6d:fd:e5:ba:dc:02:3e:c2:7d:7a:33:71:51:08:c7:
         cf:e0:6b:fa:eb:2f:59:b5:ae:c1:37:b5:92:94:0e:66:7c:9a:
         57:c7:d6:99:19:92:91:24:d5:95:f1:27:97:e3:c0:34:2b:af:
         21:04:74:7b:b1:ea:ee:0e:b7:d5:e1:38:d5:6c:47:a0:ef:6a:
         99:a9:aa:de:b2:8f:b1:24:2b:c1:4c:48:0b:50:5d:88:4e:ed:
         f5:d1:6c:28:e0:74:ec:71:b2:e2:2e:57:9c:64:0d:63:52:96:
         e7:19:d1:12:92:9d:bd:d7:9f:d4:6f:5f:0a:43:85:e8:86:b3:
         1f:ff:4c:a6:d4:51:91:92:e7:28:20:e5:3f:38:12:3b:70:d6:
         a0:c5:a1:ba:6e:b3:7d:52:ed:b7:6e:81:32:65:a3:58:0a:4a:
         e1:65:e7:63
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE2MzAxMTAvBgNVBAUTKDUwRThGMDRCOTAwOEZFQTFFNUMzMUY2NEU3NjNEQURF
RDI1M0E2MEMwHhcNMjUwNTMxMDYwNjM1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTM0NC01MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAowUSantRCrsuABxm8THEGBpK2t5Gso96fnLaqw2IXpmcZw+dmatGUjB7qLPD
tkAZJl50UpYw4xuplaeXlMgiWbGn6o0UZpTtlcCylViR2geNxHo5wovujs74eoCZ
Z7rlSqOBOPSIW/LMxrIso7ei2M/nAM3ThULniqC818z93a+JS9BKZoK2hFWae1Cq
I5xjM3uhSdh+woNLodJ0IN5cVGS0Wn5GteNX6iIqsWgT8rQXl2RjIbevbZWx1xBQ
OD8YGwRqbMqzaxHt9ranDMYUUeOnKnN+Dsam5g8ydXlRveUUpkaOdFUVNf89NXSc
smDrNXxwL5zhvBdNA5QyTQCnbwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFD3Xjl/g
BPZCaVOEtRF9fg2P3HDJMB8GA1UdIwQYMBaAFFDo8EuQCP6h5cMfZOdj2t7SU6YM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTYzMC8xNTI3NEYwRTEx
NDExMUVGOEYxNzg3MEZDNEY5QUUwMi9VT2p3UzVBSV9xSGx3eDlrNTJQYTN0SlRw
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VPandTNUFJX3FIbHd4OWs1MlBhM3RKVHBndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE2MzAvMTUyNzRGMEUxMTQxMTFFRjhGMTc4NzBGQzRGOUFFMDIvMTgxNDE0MjYx
MTQyMTFFRkEwRkYzOTU2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ5rAMA8EAgACMAkDBwAgAQ3zzEAwDQYJKoZIhvcNAQELBQADggEB
AGVTlhoRRM4wALTQPGh83cNt2T9qweURvH8ilKEuhv+dsr4imqpIjG+66VhW2Um0
Woe9UsyQqfktP33Zue1Hrm0y3Y+vkH4ZIQcnroROWMAf4uwQUEosgQPLGQdQ1W39
5brcAj7CfXozcVEIx8/ga/rrL1m1rsE3tZKUDmZ8mlfH1pkZkpEk1ZXxJ5fjwDQr
ryEEdHux6u4Ot9XhONVsR6Dvapmpqt6yj7EkK8FMSAtQXYhO7fXRbCjgdOxxsuIu
V5xkDWNSlucZ0RKSnb3Xn9RvXwpDheiGsx//TKbUUZGS5ygg5T84Ejtw1qDFobpu
s31S7bdugTJlo1gKSuFl52M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:54:57 2026 by rpki-client